What does it mean to be secure?

The Joint Commission defines “secure” as locked in containers, in a locked room, or under constant surveillance. Furthermore, in many cases, monitoring remotely via camera is not adequate in meeting constant surveillance if there is an opportunity for something to occur without the means to immediately react to minimize the risk. 

Organizations are to conduct a risk assessment regarding unique security issues in accordance with standard EC.02.01.01. A course of action should be established that is both defensible and rational. The organization is expected to implement the course of action, then analyze if the desired affect was achieved. 

Reference EC.02.01.01